I-9 and E-Verify Basics: How to Onboard a New Hire Without a Compliance Headache

The I-9 is the most boring form you’ll ever be asked about, and also one of the most expensive when it’s wrong. U.S. Immigration and Customs Enforcement audits can turn up per-form penalties for paperwork errors alone, no unauthorized workers necessary, and those penalties scale fast when an employer has been sloppy across dozens of hires.

If you’re onboarding employees, you’re the last line of defense on I-9 and E-Verify compliance. Here’s what the form is actually for, how to complete it correctly, how E-Verify fits in, and the five most common mistakes to avoid.

What Form I-9 Is (and Isn’t)

Form I-9 is the federal form employers use to verify that each new employee is authorized to work in the United States. It has been required since 1986. The form has two sections that matter for onboarding:

• Section 1. Completed by the employee on or before their first day of work. Identifies them, attests to their work authorization, and, if applicable, identifies a preparer or translator.
• Section 2. Completed by the employer within three business days of the employee’s first day. You examine original documents from the lists on the form and record what you saw.

What the I-9 is not: a visa application, a background check, a tax form, or a pretext for investigating an employee’s national origin. You cannot require specific documents, and you cannot ask for more documents than the form requires.

The Three-Day Rule and the Day-One Rule

Two deadlines, and they are real:

• Section 1 must be completed no later than the employee’s first day of work for pay.
• Section 2 must be completed no later than the third business day after the employee’s first day of work. If the job will last fewer than three days total, Section 2 must be completed by the end of day one.

Late I-9s are a paperwork violation whether or not the employee is authorized. Add the deadline to your onboarding calendar and assign an owner.

I-9 Document Lists A, B, and C Explained

The I-9 offers three lists of acceptable documents. The employee gets to choose what to present, not you.

• List A documents. Prove both identity and employment authorization. Examples: U.S. passport, Permanent Resident Card, Employment Authorization Document.
• List B documents. Prove identity only. Examples: state-issued driver’s license, state ID card, school ID with photograph.
• List C documents. Prove employment authorization only. Examples: unrestricted Social Security card, birth certificate, certain DHS-issued documents.

Employees present either one document from List A, or one from List B plus one from List C. You cannot suggest, require, or prefer specific documents. Doing so is called “document abuse” and is a separate violation with its own penalties.

E-Verify: Who Has to, Who Doesn’t, and What It Adds

E-Verify is a free, internet-based government system that checks I-9 information against Social Security Administration and Department of Homeland Security records. It’s voluntary for most private employers, but mandatory for federal contractors with certain clauses and for employers in several states including Arizona, Alabama, Georgia, Mississippi, North Carolina, South Carolina, Tennessee, Utah, and others, each with their own scope.

A few practical notes if you’re deciding whether to enroll:

• E-Verify does not replace the I-9. It runs in addition to it.
• You must run E-Verify on every new hire once enrolled. You cannot pick and choose.
• A “Tentative Nonconfirmation” is not a denial. The employee has a right to contest it, and you cannot terminate or suspend them during the contest period.
• The photo-matching step catches document fraud that the I-9 alone will miss.

I-9 Retention and Re-Verification Rules

Two rules that most small employers overlook:

• Retain each I-9 for the later of three years after the hire date or one year after the date of termination. Store I-9s separately from the rest of the personnel file so they’re easy to produce in an audit and don’t expose unrelated personal information.
• Re-verify work authorization for employees whose authorization documents have expiration dates before the expiration. Do not re-verify U.S. citizens, permanent residents, or documents where re-verification is not required. The I-9 form’s instructions are the authoritative guide on which is which.

The Five Most Common I-9 Errors

• Missing signatures or dates, especially in Section 1, where the employee often signs and forgets to date, or vice versa.
• Accepting expired documents. Driver’s licenses and passports are only acceptable if unexpired at the time of presentation.
• Recording partial document information in Section 2, for example omitting the issuing authority or document number.
• Completing Section 2 late, or with a gap between the employee’s start date and the Section 2 completion date.
• Requiring specific documents (“We need a Social Security card”) instead of letting the employee choose. This is document abuse even when well-intentioned.

Remote Onboarding and I-9 Compliance

ICE’s remote I-9 verification procedures have changed repeatedly in recent years. For employers enrolled in E-Verify and in good standing, a remote examination option allows the employer to inspect documents over video rather than in person. The rules include specific recordkeeping and indicator requirements. Before you adopt a remote process, confirm you’re using the current, approved version and that you qualify. The rules here have moved more than once.

The Bottom Line

The I-9 is the cheapest compliance task you’ll do this week and the most expensive one you’ll do if you do it wrong. Section 1 on day one, Section 2 within three business days, never tell an employee which documents to bring, keep the folder separate, and set calendar reminders for anything that expires. Everything else is detail. Netchex embeds I-9 and E-Verify directly in your new-hire onboarding workflow, so Section 1 goes to the employee on day one, Section 2 is completed on time, documents are stored where they belong, and re-verification reminders fire automatically before any authorization expires.

Frequently Asked Questions

This guide reflects publicly available product information and independent reviewer data (G2, Capterra, Trustpilot, Yelp, Better Business Bureau, Reddit, Software Advice, GetApp) as of 2026. Feature availability and pricing may vary by plan. Contact each provider for current details.

Disclaimer: Any product roadmap or future plans provided herein are for informational purposes only. They do not represent a commitment to deliver any material, code, feature, or functionality. Plans may change without notification. The development, release and timing of any features or functionality described remain at the sole discretion of Netchex, its affiliates, and partners. Netchex does not give legal, tax, or accounting advice. You are responsible for ensuring your use of Netchex product meets your individual business and compliance requirements.

Print this page